last executing test programs: 8m16.868008658s ago: executing program 0 (id=251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5", 0x4f}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7e", 0x98}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4", 0x41}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1) 8m16.473837331s ago: executing program 3 (id=255): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0)=0x2000000, &(0x7f0000000540)}, 0x20) 8m16.403729688s ago: executing program 0 (id=256): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) 8m16.123789191s ago: executing program 3 (id=257): creat(&(0x7f0000000040)='./bus\x00', 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095", @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x100000000000}, 0x18) r1 = dup(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES32=r1], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472618f733c668b737dc7", @ANYRESHEX, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 8m14.800246599s ago: executing program 3 (id=261): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f00001859c0)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) r6 = socket(0x6, 0x6, 0x9) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000000)) read(0xffffffffffffffff, 0x0, 0x0) 8m12.554879887s ago: executing program 3 (id=265): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) uname(&(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) unshare(0x22020400) write(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 8m10.226583042s ago: executing program 0 (id=269): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="bc", 0x1}], 0x1}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x96) close(r1) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) 8m9.804609916s ago: executing program 0 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r4, &(0x7f0000000380)="16", 0x1) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f4"], 0x1c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 8m8.509653816s ago: executing program 0 (id=274): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 8m8.270837996s ago: executing program 3 (id=276): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000000)={0xfffffff2, 0x6c}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) 8m4.002785931s ago: executing program 0 (id=285): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0xffff}) 8m3.866029436s ago: executing program 3 (id=287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 7m48.620822063s ago: executing program 32 (id=285): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x7, 0xffff}) 7m48.518786057s ago: executing program 33 (id=287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 3m30.079652679s ago: executing program 1 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 3m29.497699126s ago: executing program 1 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 3m28.565926631s ago: executing program 1 (id=796): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) socket$netlink(0x10, 0x3, 0x0) 3m19.950894993s ago: executing program 1 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40008004) sendmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)}, {&(0x7f0000000400)="94278d8f0ad229c70eef5473f110c9711f6dcc83a2a4320201163b820f99f03434025e41e32587d4cc1655d1c8e07cf327c8f27794c8fe5beb6ddae3539b67aeee06405d820890cf0aa6d7eb70fec838eaed46f49a8c8b", 0x57}, {&(0x7f0000000580)}], 0x3, &(0x7f00000006c0)}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x79c) 3m18.826816681s ago: executing program 1 (id=820): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) 3m17.770967315s ago: executing program 1 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3m2.4808035s ago: executing program 34 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 2m54.783697735s ago: executing program 6 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) 2m53.841193271s ago: executing program 6 (id=880): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m53.582857406s ago: executing program 6 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}], 0x1, 0x20041000) recvmsg(r4, 0x0, 0x40010063) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) 2m52.44295292s ago: executing program 6 (id=885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000380)={{0x5, 0x4, 0x9, 0x1000, 'syz0\x00', 0x1}, 0x5, 0x1, 0x9, 0x0, 0x9, 0x8, 'syz1\x00', &(0x7f0000000340)=['\x00', 'GPL\x00', 'GPL\x00', 'bridge0\x00', 'GPL\x00', '.#&\x00', ':\x06\x00', 'macvlan\x00', '/dev/autofs\x00'], 0x30}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = gettid() close(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff9}}, './file0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) close(r3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r9, 0x40086602, &(0x7f0000000000)) 2m49.929824548s ago: executing program 6 (id=890): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r2, 0x0, 0x0, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r10, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 2m48.784181827s ago: executing program 6 (id=894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m32.97702032s ago: executing program 35 (id=894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23.761146628s ago: executing program 9 (id=1188): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d0000000005f00000085000000fb00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005"], 0x1c0}, 0x1, 0xba01}, 0x20048050) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)={0xff, 0xb, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x6, [0x2009, 0x2, 0x9, 0xfffffffffffffffe, 0xe1, 0x5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @local}]}, 0x68) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000001c0)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) 22.658962968s ago: executing program 2 (id=1191): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002140)={@fallback, 0x10, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 20.83604788s ago: executing program 2 (id=1193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 17.974922271s ago: executing program 7 (id=1201): pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0x82, 0x5, 0x9, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x1000, &(0x7f0000002080)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x1, 0x2, 0x6, 0x4}, {0x5, 0x1}, {0x1, 0x1, 0x1, 0x9}], 0x10, 0x5c600e89}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) brk(0x7fffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 16.910300271s ago: executing program 7 (id=1203): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 16.697586246s ago: executing program 8 (id=1204): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000a000000000000006000000850000002e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) close(r5) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x5, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 15.590640282s ago: executing program 4 (id=1206): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 15.244838574s ago: executing program 7 (id=1208): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291", @ANYRESOCT], 0x1, 0x5504, &(0x7f0000005f80)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) 14.460885241s ago: executing program 8 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 14.310949995s ago: executing program 2 (id=1210): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) 13.580850761s ago: executing program 8 (id=1212): eventfd(0x3) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x880, 0x0) 12.738567151s ago: executing program 2 (id=1214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e782794cd9f89c435b2b2afab", 0xcb}, {&(0x7f0000001080)="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", 0x379}], 0x2}}], 0x2, 0x0) 11.785726021s ago: executing program 9 (id=1215): pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0x82, 0x5, 0x9, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x1000, &(0x7f0000002080)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x1, 0x2, 0x6, 0x4}, {0x5, 0x1}, {0x1, 0x1, 0x1, 0x9}], 0x10, 0x5c600e89}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) brk(0x7fffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 10.721018091s ago: executing program 2 (id=1216): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r2, 0x0, 0x0, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r10, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 10.653827844s ago: executing program 9 (id=1217): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x3ff, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 9.862792508s ago: executing program 7 (id=1219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1b8d2069162baf34"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) 6.392665147s ago: executing program 5 (id=1220): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x400c890) 6.331109858s ago: executing program 2 (id=1221): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2e1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) 6.246834836s ago: executing program 7 (id=1222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x90000004}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r6, 0x289e0cb5, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) 5.951850233s ago: executing program 5 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 4.962429745s ago: executing program 9 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcc4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000800000000000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303337372c757466382c696f636861727365743d6d616363656c26e207df7469632c6572726f72733d636f6e74696e75652c6e616d6563617365"], 0x1, 0x14f7, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x802, 0x116) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mlock(&(0x7f000049d000/0x4000)=nil, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_rr_get_interval(r1, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 4.656225929s ago: executing program 5 (id=1226): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x50) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, r2, {{0x2, 0xcd21, 0x0, 0xffffffffffffffff}}}, 0x28) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x252d, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa0000019}) finit_module(r5, 0x0, 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000043c0)=ANY=[@ANYBLOB="2900000003000000a45cbdce7de12b9402d3324d000000000000000001000000000069640000"], 0x29) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$phonet(0xffffffffffffffff, 0x0, 0x0) 4.654901377s ago: executing program 4 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.691219748s ago: executing program 4 (id=1228): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="9d91", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="78fa12a63e6ad688fd773a60f37516cdd3046bf74f6bcba0bb42fbb007c4d9aba8b6601a4e9bf7e3577c2e8eec81a2a4979641f006a16075ce22cab98b59fc1d478b3f258d43d58016a26150617024d7194739ef7ec9e5d58a5f2d86763af58341a53c3d910e47a2523d4b83e6c3ded75548aee74b3a03320a202786503129056e9eec1f3decffe2ab6019ff0be7b18f4bcf89c7eccbc1747d27503674289bf6014a2099298645fef8e6ea5ce590d53a414363bc9824d8590af54581553f1e782794cd9f89c435b2b2afab", 0xcb}, {&(0x7f0000001080)="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", 0x379}], 0x2}}], 0x2, 0x0) 1.990602734s ago: executing program 5 (id=1229): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 1.847601914s ago: executing program 7 (id=1230): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x40, 0x5, 0x2, 'H\x00'}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000013a80)={0x2c, &(0x7f0000013940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0}) 1.846210993s ago: executing program 4 (id=1231): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) 1.750883451s ago: executing program 8 (id=1232): socket(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4014) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x80004, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x40000001, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8002}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.536167768s ago: executing program 4 (id=1233): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r2, 0x0, 0x0, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r10, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) 437.454177ms ago: executing program 8 (id=1234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 330.938572ms ago: executing program 5 (id=1235): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x80) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) open$dir(&(0x7f0000000280)='./file0\x00', 0x84c80, 0x4) 322.625487ms ago: executing program 4 (id=1236): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) 150.799097ms ago: executing program 8 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 5 (id=1238): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 57][ T8214] lo speed is unknown, defaulting to 1000 [ 367.889443][ T5883] Bluetooth: hci4: command tx timeout [ 368.028304][ T8230] loop2: detected capacity change from 0 to 8192 [ 369.232276][ T30] audit: type=1800 audit(369.216:8): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.523" name="bus" dev="loop2" ino=1048653 res=0 errno=0 [ 369.443223][ T5883] Bluetooth: hci1: command tx timeout [ 370.148974][ T5883] Bluetooth: hci4: command tx timeout [ 371.344603][ T8291] loop4: detected capacity change from 0 to 512 [ 371.357632][ T8291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.364835][ T8291] EXT4-fs: Ignoring removed bh option [ 371.481319][ T8291] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 371.500245][ T8291] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.533: corrupted inode contents [ 371.514462][ T5883] Bluetooth: hci1: command tx timeout [ 371.527178][ T8291] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.533: mark_inode_dirty error [ 371.540952][ T8291] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.533: invalid indirect mapped block 1 (level 1) [ 371.556007][ T8291] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.533: corrupted inode contents [ 371.579432][ T8291] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 371.592482][ T8291] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.533: corrupted inode contents [ 371.606234][ T5948] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 371.614030][ T8291] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.533: mark_inode_dirty error [ 371.634932][ T8291] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 371.646325][ T8291] EXT4-fs (loop4): 1 truncate cleaned up [ 371.665504][ T8291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.279452][ T5883] Bluetooth: hci4: command tx timeout [ 373.049518][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 373.070112][ T5948] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 373.129390][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 373.183623][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.146294][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.156740][ T5948] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.199363][ T5948] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.229447][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.290902][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 374.305417][ T5948] usb 3-1: can't set config #16, error -32 [ 374.340516][ T5948] usb 3-1: USB disconnect, device number 4 [ 374.390961][ T8310] loop2: detected capacity change from 0 to 256 [ 374.398201][ T8310] exfat: Deprecated parameter 'utf8' [ 374.405311][ T8310] exfat: Deprecated parameter 'utf8' [ 374.470671][ T8310] exfat: Deprecated parameter 'namecase' [ 374.515156][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 374.584271][ T8310] exFAT-fs (loop2): error, The cluster chain has a loop [ 374.609491][ T6015] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 374.646566][ T8310] exFAT-fs (loop2): Filesystem has been set read-only [ 374.654758][ T8310] exFAT-fs (loop2): failed to count the number of clusters in root [ 374.664406][ T8310] exFAT-fs (loop2): failed to recognize exfat type [ 376.632072][ T8315] loop4: detected capacity change from 0 to 256 [ 376.828704][ T8315] FAT-fs (loop4): Directory bread(block 64) failed [ 376.835953][ T8315] FAT-fs (loop4): Directory bread(block 65) failed [ 376.843573][ T8315] FAT-fs (loop4): Directory bread(block 66) failed [ 376.850401][ T8315] FAT-fs (loop4): Directory bread(block 67) failed [ 376.857856][ T8315] FAT-fs (loop4): Directory bread(block 68) failed [ 376.864605][ T8315] FAT-fs (loop4): Directory bread(block 69) failed [ 376.871833][ T8315] FAT-fs (loop4): Directory bread(block 70) failed [ 376.878531][ T8315] FAT-fs (loop4): Directory bread(block 71) failed [ 376.886019][ T8315] FAT-fs (loop4): Directory bread(block 72) failed [ 376.892766][ T8315] FAT-fs (loop4): Directory bread(block 73) failed [ 377.371735][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 377.415036][ T6015] usb 6-1: device descriptor read/all, error -71 [ 377.895290][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.907292][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.147638][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 380.184542][ T6257] bridge_slave_1: left allmulticast mode [ 380.313813][ T8345] loop4: detected capacity change from 0 to 256 [ 380.345002][ T8345] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.355729][ T8345] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 380.414661][ T8345] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 380.583398][ T6257] bridge_slave_1: left promiscuous mode [ 380.592828][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.153137][ T6257] bridge_slave_0: left allmulticast mode [ 382.231252][ T6257] bridge_slave_0: left promiscuous mode [ 382.237086][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.697912][ T6015] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 383.339666][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 383.346913][ T6015] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.376462][ T6015] usb 6-1: config 0 has no interface number 0 [ 383.395808][ T6015] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 383.438381][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.475898][ T6015] usb 6-1: Product: syz [ 383.484790][ T6015] usb 6-1: Manufacturer: syz [ 383.501332][ T6015] usb 6-1: SerialNumber: syz [ 383.525653][ T6015] usb 6-1: config 0 descriptor?? [ 383.553158][ T6015] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 383.755109][ T6015] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 383.921339][ T6015] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 384.249898][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 384.250677][ T5968] usb 6-1: USB disconnect, device number 8 [ 384.314276][ T5968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 384.362665][ T5968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.411750][ T5968] quatech2 6-1:0.51: device disconnected [ 385.254625][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.410280][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.657027][ T6257] bond0 (unregistering): Released all slaves [ 386.528511][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.558076][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.575903][ T8211] bridge_slave_0: entered allmulticast mode [ 386.812908][ T8211] bridge_slave_0: entered promiscuous mode [ 386.894886][ T6257] hsr_slave_0: left promiscuous mode [ 386.912073][ T6257] hsr_slave_1: left promiscuous mode [ 386.926269][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.945963][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.962025][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.037235][ T6257] veth1_macvtap: left promiscuous mode [ 387.063674][ T6257] veth0_macvtap: left promiscuous mode [ 387.086194][ T6257] veth1_vlan: left promiscuous mode [ 387.108184][ T6257] veth0_vlan: left promiscuous mode [ 388.092833][ T8433] futex_wake_op: syz.5.573 tries to shift op by 36; fix this program [ 388.239187][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 388.380935][ T6015] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 388.550565][ T6015] usb 2-1: Using ep0 maxpacket: 32 [ 388.583027][ T6015] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 388.593680][ T6015] usb 2-1: config 0 has no interface number 0 [ 388.604178][ T6015] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 388.616725][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.625296][ T6015] usb 2-1: Product: syz [ 388.629851][ T6015] usb 2-1: Manufacturer: syz [ 388.634952][ T6015] usb 2-1: SerialNumber: syz [ 388.687820][ T6015] usb 2-1: config 0 descriptor?? [ 388.697718][ T6015] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 388.919955][ T6015] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 388.947930][ T6015] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 389.412524][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 389.423675][ T5877] usb 2-1: USB disconnect, device number 6 [ 390.010331][ T5877] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 390.080136][ T5877] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 390.140958][ T5877] quatech2 2-1:0.51: device disconnected [ 391.643504][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 393.759953][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 396.300639][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.308179][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.318861][ T8211] bridge_slave_1: entered allmulticast mode [ 396.328823][ T8211] bridge_slave_1: entered promiscuous mode [ 397.292703][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.683227][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.190882][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.219579][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.241976][ T8214] bridge_slave_0: entered allmulticast mode [ 399.274775][ T8214] bridge_slave_0: entered promiscuous mode [ 399.306470][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.324454][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.339702][ T8214] bridge_slave_1: entered allmulticast mode [ 399.356915][ T8214] bridge_slave_1: entered promiscuous mode [ 399.376334][ T8211] team0: Port device team_slave_0 added [ 399.494440][ T8211] team0: Port device team_slave_1 added [ 399.563938][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.617482][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.642452][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.652344][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.684350][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.762497][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.784291][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.830184][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.956009][ T8214] team0: Port device team_slave_0 added [ 400.324390][ T8214] team0: Port device team_slave_1 added [ 403.674809][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.509613][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.537307][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.594316][ T8211] hsr_slave_0: entered promiscuous mode [ 404.650765][ T8211] hsr_slave_1: entered promiscuous mode [ 404.717263][ T8211] debugfs: 'hsr0' already exists in 'hsr' [ 404.778078][ T8211] Cannot create hsr debugfs directory [ 405.087208][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.122807][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.260963][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.361933][ T8214] hsr_slave_0: entered promiscuous mode [ 407.368609][ T8214] hsr_slave_1: entered promiscuous mode [ 407.391557][ T8613] loop1: detected capacity change from 0 to 128 [ 407.406575][ T8214] debugfs: 'hsr0' already exists in 'hsr' [ 407.425979][ T8214] Cannot create hsr debugfs directory [ 407.437276][ T8613] vfat: Bad value for 'gid' [ 407.476834][ T8613] vfat: Bad value for 'gid' [ 407.821528][ T8611] loop2: detected capacity change from 0 to 256 [ 408.079673][ T8611] FAT-fs (loop2): Directory bread(block 64) failed [ 408.086467][ T8611] FAT-fs (loop2): Directory bread(block 65) failed [ 408.094309][ T8611] FAT-fs (loop2): Directory bread(block 66) failed [ 408.101147][ T8611] FAT-fs (loop2): Directory bread(block 67) failed [ 408.108527][ T8611] FAT-fs (loop2): Directory bread(block 68) failed [ 408.115318][ T8611] FAT-fs (loop2): Directory bread(block 69) failed [ 408.123374][ T8611] FAT-fs (loop2): Directory bread(block 70) failed [ 408.130538][ T8611] FAT-fs (loop2): Directory bread(block 71) failed [ 408.137990][ T8611] FAT-fs (loop2): Directory bread(block 72) failed [ 408.144738][ T8611] FAT-fs (loop2): Directory bread(block 73) failed [ 410.439522][ T6079] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 410.556619][ T6257] bridge_slave_1: left allmulticast mode [ 410.585581][ T6257] bridge_slave_1: left promiscuous mode [ 410.603504][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.631521][ T6079] usb 5-1: Using ep0 maxpacket: 8 [ 410.644017][ T6257] bridge_slave_0: left allmulticast mode [ 410.659527][ T6257] bridge_slave_0: left promiscuous mode [ 410.667002][ T6079] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.680172][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.697468][ T6079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.752399][ T6079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.782271][ T6079] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.846628][ T6079] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.889568][ T6079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.098386][ T8632] loop1: detected capacity change from 0 to 40427 [ 411.144006][ T6079] usb 5-1: GET_CAPABILITIES returned 0 [ 411.166833][ T6079] usbtmc 5-1:16.0: can't read capabilities [ 411.208575][ T8632] F2FS-fs (loop1): invalid crc value [ 411.553577][ T8632] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 411.633558][ T8632] F2FS-fs (loop1): Start checkpoint disabled! [ 411.660888][ T8632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 412.047096][ T8632] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 412.117897][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.203461][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.260135][ T6668] kworker/u8:22: attempt to access beyond end of device [ 412.260135][ T6668] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 412.275330][ T6257] bond0 (unregistering): Released all slaves [ 412.310591][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 412.310622][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.310637][ T6668] Workqueue: writeback wb_workfn (flush-7:1) [ 412.310673][ T6668] Call Trace: [ 412.310683][ T6668] [ 412.310694][ T6668] dump_stack_lvl+0x189/0x250 [ 412.310724][ T6668] ? preempt_schedule_thunk+0x16/0x30 [ 412.310768][ T6668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.310798][ T6668] ? __pfx_queue_work_on+0x10/0x10 [ 412.310822][ T6668] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 412.310863][ T6668] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.310919][ T6668] f2fs_handle_critical_error+0x37c/0x540 [ 412.310968][ T6668] f2fs_write_end_io+0x886/0xb60 [ 412.311021][ T6668] __submit_merged_bio+0x27a/0x6a0 [ 412.311067][ T6668] __submit_merged_write_cond+0x255/0x530 [ 412.311115][ T6668] f2fs_write_data_pages+0x261d/0x3000 [ 412.311190][ T6668] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 412.311330][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311363][ T6668] ? f2fs_write_meta_pages+0x357/0x450 [ 412.311400][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311427][ T6668] ? __lock_acquire+0xab9/0xd20 [ 412.311472][ T6668] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 412.311498][ T6668] do_writepages+0x32e/0x550 [ 412.311540][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311567][ T6668] ? reacquire_held_locks+0x127/0x1d0 [ 412.311592][ T6668] ? writeback_sb_inodes+0x384/0x1010 [ 412.311638][ T6668] __writeback_single_inode+0x145/0xff0 [ 412.311670][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311697][ T6668] ? do_raw_spin_unlock+0x122/0x240 [ 412.311736][ T6668] writeback_sb_inodes+0x6c7/0x1010 [ 412.311808][ T6668] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 412.311903][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311930][ T6668] ? rcu_is_watching+0x15/0xb0 [ 412.311955][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.311996][ T6668] wb_writeback+0x43b/0xaf0 [ 412.312041][ T6668] ? queue_io+0x351/0x590 [ 412.312080][ T6668] ? __pfx_wb_writeback+0x10/0x10 [ 412.312125][ T6668] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.312170][ T6668] wb_workfn+0x409/0xef0 [ 412.312219][ T6668] ? __pfx_wb_workfn+0x10/0x10 [ 412.312255][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312282][ T6668] ? __lock_acquire+0xab9/0xd20 [ 412.312334][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312366][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312398][ T6668] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.312433][ T6668] ? process_scheduled_works+0x9ef/0x17b0 [ 412.312456][ T6668] ? process_scheduled_works+0x9ef/0x17b0 [ 412.312483][ T6668] process_scheduled_works+0xae1/0x17b0 [ 412.312552][ T6668] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.312588][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312629][ T6668] worker_thread+0x8a0/0xda0 [ 412.312696][ T6668] kthread+0x711/0x8a0 [ 412.312732][ T6668] ? __pfx_worker_thread+0x10/0x10 [ 412.312757][ T6668] ? __pfx_kthread+0x10/0x10 [ 412.312783][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312816][ T6668] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.312851][ T6668] ? srso_alias_return_thunk+0x5/0xfbef5 [ 412.312878][ T6668] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.312900][ T6668] ? __pfx_kthread+0x10/0x10 [ 412.312934][ T6668] ret_from_fork+0x439/0x7d0 [ 412.312964][ T6668] ? __pfx_ret_from_fork+0x10/0x10 [ 412.312999][ T6668] ? __switch_to_asm+0x39/0x70 [ 412.313030][ T6668] ? __switch_to_asm+0x33/0x70 [ 412.313060][ T6668] ? __pfx_kthread+0x10/0x10 [ 412.313094][ T6668] ret_from_fork_asm+0x1a/0x30 [ 412.313152][ T6668] [ 412.313162][ T6668] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 412.852510][ T8671] bridge2: entered promiscuous mode [ 412.982888][ T6257] hsr_slave_0: left promiscuous mode [ 412.989394][ T6257] hsr_slave_1: left promiscuous mode [ 413.010264][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.037111][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.144809][ T6257] veth0_vlan: left promiscuous mode [ 413.184541][ T10] usb 5-1: USB disconnect, device number 10 [ 413.433910][ T8682] befs: (nbd4): No write support. Marking filesystem read-only [ 413.493883][ T8682] block nbd4: Attempted send on invalid socket [ 413.550697][ T8682] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.659499][ T8682] befs: (nbd4): unable to read superblock [ 413.713967][ T8684] fuse: Bad value for 'fd' [ 414.270154][ T8693] loop1: detected capacity change from 0 to 16 [ 414.310168][ T8693] erofs (device loop1): mounted with root inode @ nid 36. [ 415.273106][ T8702] loop4: detected capacity change from 0 to 512 [ 415.311935][ T8702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.319005][ T8702] EXT4-fs: Ignoring removed bh option [ 415.377201][ T8702] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 415.412449][ T8702] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.631: corrupted inode contents [ 415.429182][ T5968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 415.430458][ T8702] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.631: mark_inode_dirty error [ 415.499031][ T8702] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.631: invalid indirect mapped block 1 (level 1) [ 415.538627][ T8702] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.631: corrupted inode contents [ 415.608031][ T8702] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 415.629459][ T5968] usb 3-1: Using ep0 maxpacket: 32 [ 415.646176][ T5968] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 415.650032][ T8702] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.631: corrupted inode contents [ 415.677121][ T5968] usb 3-1: config 0 has no interface number 0 [ 415.692005][ T5968] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 415.701472][ T8702] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.631: mark_inode_dirty error [ 415.701933][ T8702] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 415.728453][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.737205][ T5968] usb 3-1: Product: syz [ 415.738857][ T8702] EXT4-fs (loop4): 1 truncate cleaned up [ 415.741509][ T5968] usb 3-1: Manufacturer: syz [ 415.741595][ T5968] usb 3-1: SerialNumber: syz [ 415.747885][ T5968] usb 3-1: config 0 descriptor?? [ 415.800955][ T8702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.835668][ T5968] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 415.988434][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.026690][ T5968] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 416.126461][ T5968] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 416.303101][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 416.402501][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 416.412470][ T5968] usb 3-1: USB disconnect, device number 5 [ 416.443071][ T5968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 416.517401][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 416.526054][ T5968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 416.556627][ T5968] quatech2 3-1:0.51: device disconnected [ 417.427078][ T8721] loop4: detected capacity change from 0 to 512 [ 418.135565][ T8720] syz.1.636 (8720): drop_caches: 2 [ 418.519410][ T8721] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.635: casefold flag without casefold feature [ 418.588436][ T8721] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.635: couldn't read orphan inode 15 (err -117) [ 418.711590][ T8721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.029583][ T8738] loop5: detected capacity change from 0 to 256 [ 421.056656][ T8738] exfat: Deprecated parameter 'utf8' [ 421.079558][ T8738] exfat: Deprecated parameter 'namecase' [ 421.085240][ T8738] exfat: Bad value for 'namecase' [ 423.612164][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.630828][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.639075][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.652082][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.679702][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 424.082527][ T8751] lo speed is unknown, defaulting to 1000 [ 424.118923][ T5883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.130453][ T5883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.144074][ T5883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.160130][ T5883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.170963][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 424.184876][ T5883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.856055][ T8761] lo speed is unknown, defaulting to 1000 [ 424.869444][ T5948] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 424.901351][ T8770] loop5: detected capacity change from 0 to 8192 [ 425.059447][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 425.108316][ T5948] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 425.364425][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 425.389299][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.420109][ T5948] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.730110][ T5883] Bluetooth: hci6: command tx timeout [ 425.769140][ T5948] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.047415][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.070373][ T6257] bridge_slave_1: left allmulticast mode [ 426.119317][ T6257] bridge_slave_1: left promiscuous mode [ 426.199551][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.260841][ T6257] bridge_slave_0: left allmulticast mode [ 426.266558][ T6257] bridge_slave_0: left promiscuous mode [ 426.289871][ T5883] Bluetooth: hci7: command tx timeout [ 426.299866][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.357501][ T5948] usb 3-1: GET_CAPABILITIES returned 0 [ 426.366594][ T5948] usbtmc 3-1:16.0: can't read capabilities [ 427.230958][ T8791] netlink: 124 bytes leftover after parsing attributes in process `syz.2.646'. [ 427.625090][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.709986][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.753232][ T6257] bond0 (unregistering): Released all slaves [ 427.809540][ T5883] Bluetooth: hci6: command tx timeout [ 428.126031][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.370641][ T5883] Bluetooth: hci7: command tx timeout [ 428.415468][ T6257] hsr_slave_0: left promiscuous mode [ 428.474067][ T6257] hsr_slave_1: left promiscuous mode [ 428.497871][ T8806] loop4: detected capacity change from 0 to 128 [ 428.506536][ T5948] usb 3-1: USB disconnect, device number 6 [ 428.510163][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.550660][ T8806] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.592722][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.674121][ T8806] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 429.889448][ T5883] Bluetooth: hci6: command tx timeout [ 430.197817][ T8822] siw: device registration error -23 [ 430.450417][ T5883] Bluetooth: hci7: command tx timeout [ 430.872114][ T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.206207][ T5885] Bluetooth: hci7: command tx timeout [ 433.212181][ T5883] Bluetooth: hci6: command tx timeout [ 436.239337][ T5968] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 436.263123][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 436.449637][ T5968] usb 5-1: Using ep0 maxpacket: 8 [ 436.469183][ T5968] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.509181][ T5968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.543546][ T5968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.573073][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 436.604504][ T5968] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.629389][ T5968] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.638429][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.923630][ T5968] usb 5-1: GET_CAPABILITIES returned 0 [ 436.930004][ T5968] usbtmc 5-1:16.0: can't read capabilities [ 437.652292][ T8890] netlink: 124 bytes leftover after parsing attributes in process `syz.4.664'. [ 438.239661][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 438.467060][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 438.644586][ T8905] siw: device registration error -23 [ 439.258044][ T6079] usb 5-1: USB disconnect, device number 11 [ 439.340347][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.346821][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.137207][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.161315][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.184132][ T8751] bridge_slave_0: entered allmulticast mode [ 440.194059][ T8897] 9pnet_fd: Insufficient options for proto=fd [ 440.224396][ T8751] bridge_slave_0: entered promiscuous mode [ 440.813492][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.825156][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.834318][ T8751] bridge_slave_1: entered allmulticast mode [ 440.860419][ T8751] bridge_slave_1: entered promiscuous mode [ 440.950794][ T6257] bridge_slave_1: left allmulticast mode [ 440.959332][ T6257] bridge_slave_1: left promiscuous mode [ 440.972645][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.015889][ T6257] bridge_slave_0: left allmulticast mode [ 441.035510][ T6257] bridge_slave_0: left promiscuous mode [ 441.059100][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.425662][ T6257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.461577][ T6257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.507888][ T6257] bond0 (unregistering): Released all slaves [ 441.767420][ T8945] loop2: detected capacity change from 0 to 256 [ 442.431794][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.460088][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.500288][ T8761] bridge_slave_0: entered allmulticast mode [ 442.536070][ T8761] bridge_slave_0: entered promiscuous mode [ 442.560774][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.630819][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.643712][ T8761] bridge_slave_1: entered allmulticast mode [ 442.719785][ T8761] bridge_slave_1: entered promiscuous mode [ 442.771833][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.793841][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.519425][ T6257] hsr_slave_0: left promiscuous mode [ 443.606636][ T6257] hsr_slave_1: left promiscuous mode [ 443.665990][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.743681][ T6257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.030554][ T6079] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 444.419451][ T6079] usb 5-1: Using ep0 maxpacket: 8 [ 444.440021][ T6079] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.638473][ T6079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.786351][ T6079] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.962474][ T6079] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.016203][ T6079] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.032586][ T6079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.280937][ T6079] usb 5-1: GET_CAPABILITIES returned 0 [ 445.335149][ T6079] usbtmc 5-1:16.0: can't read capabilities [ 445.578336][ T6257] team0 (unregistering): Port device team_slave_1 removed [ 445.669130][ T8974] netlink: 124 bytes leftover after parsing attributes in process `syz.4.680'. [ 445.716780][ T6257] team0 (unregistering): Port device team_slave_0 removed [ 446.318949][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.337979][ T8751] team0: Port device team_slave_0 added [ 446.362329][ T8751] team0: Port device team_slave_1 added [ 446.395818][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.653351][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.694778][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.794228][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.848437][ T8761] team0: Port device team_slave_0 added [ 446.873381][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.902931][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.977888][ T9] usb 5-1: USB disconnect, device number 12 [ 447.188643][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.426789][ T8761] team0: Port device team_slave_1 added [ 448.204566][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.238955][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.393213][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.797886][ T8751] hsr_slave_0: entered promiscuous mode [ 448.846243][ T8751] hsr_slave_1: entered promiscuous mode [ 448.896245][ T8751] debugfs: 'hsr0' already exists in 'hsr' [ 448.933940][ T8751] Cannot create hsr debugfs directory [ 448.972953][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.986047][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.097611][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.263060][ T9015] loop5: detected capacity change from 0 to 512 [ 449.299369][ T9015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.356741][ T9015] EXT4-fs: Ignoring removed bh option [ 449.417166][ T9015] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 449.432448][ T9015] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.693: corrupted inode contents [ 449.456651][ T9015] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #11: comm syz.5.693: mark_inode_dirty error [ 449.486065][ T9015] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.693: invalid indirect mapped block 1 (level 1) [ 449.529873][ T8761] hsr_slave_0: entered promiscuous mode [ 449.550990][ T8761] hsr_slave_1: entered promiscuous mode [ 449.563417][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 449.570817][ T8761] Cannot create hsr debugfs directory [ 449.572246][ T9015] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.693: corrupted inode contents [ 449.605379][ T9015] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 449.621836][ T9015] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.693: corrupted inode contents [ 449.635471][ T9015] EXT4-fs error (device loop5): ext4_truncate:4666: inode #11: comm syz.5.693: mark_inode_dirty error [ 449.648956][ T9015] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 449.679798][ T9015] EXT4-fs (loop5): 1 truncate cleaned up [ 449.707670][ T9015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.113192][ T9024] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.693: path /115/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 450.677917][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.582078][ T9052] loop4: detected capacity change from 0 to 128 [ 453.595116][ T9052] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.799971][ T9052] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 455.931930][ T6257] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 456.098769][ T9055] netem: change failed [ 456.261507][ T8751] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.394119][ T8751] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.573333][ T8751] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 457.683217][ T8751] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 457.733773][ T9071] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 458.802552][ T8761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.889860][ T8761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.393380][ T8761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.701763][ T8761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 460.207173][ T9109] loop5: detected capacity change from 0 to 2048 [ 460.286618][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.387632][ T8705] Alternate GPT is invalid, using primary GPT. [ 461.379495][ T8705] loop5: p1 p2 p3 [ 461.383290][ T8705] loop5: partition table partially beyond EOD, truncated [ 462.180088][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.228283][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.235510][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.303758][ T8705] udevd[8705]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 462.316054][ T8703] udevd[8703]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 462.331768][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.338907][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.349874][ T8701] udevd[8701]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 462.456331][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.573509][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.642250][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.649483][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.696417][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.703614][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.586281][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.810694][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.257194][ T6079] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 464.570924][ T6079] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.796171][ T6079] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 464.969287][ T6079] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 465.015299][ T6079] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 465.094064][ T6079] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.103418][ T6079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.151290][ T6079] usb 2-1: Product: syz [ 465.166092][ T6079] usb 2-1: Manufacturer: ń°„‰ [ 465.182831][ T6079] usb 2-1: SerialNumber: syz [ 465.449361][ T6079] cdc_ncm 2-1:1.0: bind() failure [ 465.481798][ T6079] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 465.488626][ T6079] cdc_ncm 2-1:1.1: bind() failure [ 465.512480][ T8751] veth0_vlan: entered promiscuous mode [ 465.540873][ T6079] usb 2-1: USB disconnect, device number 7 [ 465.745100][ T8751] veth1_vlan: entered promiscuous mode [ 465.806388][ T9160] lo speed is unknown, defaulting to 1000 [ 465.884665][ T8761] veth0_vlan: entered promiscuous mode [ 465.896493][ T8751] veth0_macvtap: entered promiscuous mode [ 465.936633][ T8751] veth1_macvtap: entered promiscuous mode [ 465.945894][ T8761] veth1_vlan: entered promiscuous mode [ 465.959432][ T6015] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 466.009438][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 466.019168][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.057205][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.085480][ T8761] veth0_macvtap: entered promiscuous mode [ 466.098256][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.115481][ T1156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.129556][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 466.136958][ T6015] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 466.142359][ T8761] veth1_macvtap: entered promiscuous mode [ 466.152771][ T6015] usb 6-1: config 0 has no interface number 0 [ 466.158952][ T1156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.168393][ T1156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.182452][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.186764][ T6015] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 466.193084][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.214780][ T5948] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 466.224552][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.238273][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.261109][ T6015] usb 6-1: Product: syz [ 466.265360][ T6015] usb 6-1: Manufacturer: syz [ 466.273219][ T5948] usb 3-1: config 0 descriptor?? [ 466.275485][ T6015] usb 6-1: SerialNumber: syz [ 466.294801][ T6015] usb 6-1: config 0 descriptor?? [ 466.303488][ T6015] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 466.317190][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.398314][ T727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.427646][ T727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.461046][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.531504][ T6015] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 466.548369][ T6015] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 466.566467][ T727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.578948][ T6148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.595167][ T727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.652997][ T6148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.673315][ T6148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.712976][ T6148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.738619][ T9190] bridge_slave_1: left allmulticast mode [ 466.756235][ T9190] bridge_slave_1: left promiscuous mode [ 466.761514][ T5948] wacom 0003:056A:0336.0005: ignoring exceeding usage max [ 466.765156][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.822767][ T9190] bridge_slave_0: left allmulticast mode [ 466.829025][ T9190] bridge_slave_0: left promiscuous mode [ 466.842226][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.955723][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.965523][ T6079] usb 6-1: USB disconnect, device number 9 [ 467.058981][ T6079] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 467.146743][ T6079] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 467.190276][ T6079] quatech2 6-1:0.51: device disconnected [ 467.787899][ T6257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.896111][ T6257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.154440][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.272370][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.194159][ T43] usb 3-1: USB disconnect, device number 7 [ 472.633782][ T9232] loop2: detected capacity change from 0 to 512 [ 472.741345][ T9232] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 474.003141][ T9243] lo speed is unknown, defaulting to 1000 [ 474.029408][ T30] audit: type=1326 audit(474.006:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 474.157676][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.167315][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.351941][ T9249] fuse: Bad value for 'fd' [ 474.381654][ T9244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.002205][ T30] audit: type=1326 audit(474.006:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 475.029948][ T9250] loop6: detected capacity change from 0 to 512 [ 475.626096][ T9250] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.073271][ T9250] EXT4-fs: Ignoring removed bh option [ 476.179363][ T30] audit: type=1326 audit(474.006:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 476.201048][ T30] audit: type=1326 audit(474.196:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 476.861454][ T30] audit: type=1326 audit(474.206:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 476.986568][ T30] audit: type=1326 audit(474.516:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 477.044677][ T9250] EXT4-fs (loop6): Test dummy encryption mode enabled [ 477.060622][ T30] audit: type=1326 audit(474.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.6.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565af8eba9 code=0x7ffc0000 [ 477.129664][ T9250] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 477.181710][ T9250] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 477.181787][ T9250] EXT4-fs: failed to create workqueue [ 477.280702][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 477.541412][ T9250] EXT4-fs (loop6): mount failed [ 477.679272][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 477.826717][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 478.179743][ T43] usb 2-1: config 0 has no interface number 0 [ 478.190893][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 478.200275][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.208436][ T43] usb 2-1: Product: syz [ 478.214321][ T43] usb 2-1: Manufacturer: syz [ 478.222143][ T43] usb 2-1: SerialNumber: syz [ 478.243265][ T43] usb 2-1: config 0 descriptor?? [ 478.275174][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 478.533445][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 478.795495][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 478.957760][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 479.318168][ T9288] loop6: detected capacity change from 0 to 128 [ 480.269580][ T43] usb 2-1: USB disconnect, device number 8 [ 480.328548][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 481.051797][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 481.676356][ T43] quatech2 2-1:0.51: device disconnected [ 484.230152][ T9313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 484.325277][ T9327] loop7: detected capacity change from 0 to 256 [ 484.552390][ T9327] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 484.792985][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.761'. [ 485.189685][ T9313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.312560][ T9313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.410238][ T9313] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.458684][ T9313] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 485.505975][ T9313] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 486.015757][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 486.550241][ T9313] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 486.759473][ T9313] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 486.787522][ T9313] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 486.807524][ T9313] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 487.171560][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 487.249540][ T5883] Bluetooth: hci2: command 0x0c1a tx timeout [ 487.330136][ T5883] Bluetooth: hci3: command 0x0c1a tx timeout [ 487.353862][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 487.406953][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.489323][ T5883] Bluetooth: hci6: command 0x0c1a tx timeout [ 487.496590][ T5883] Bluetooth: hci5: command 0x0c1a tx timeout [ 488.158698][ T9] usb 3-1: config 0 has no interface number 0 [ 488.880648][ T5883] Bluetooth: hci7: command 0x0c1a tx timeout [ 489.394267][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 489.427601][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.435948][ T9] usb 3-1: Product: syz [ 489.459932][ T9] usb 3-1: Manufacturer: syz [ 489.464562][ T9] usb 3-1: SerialNumber: syz [ 489.571382][ T5883] Bluetooth: hci6: command 0x0c1a tx timeout [ 489.711841][ T9] usb 3-1: config 0 descriptor?? [ 489.724635][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 491.331144][ T9] usb 3-1: qt2_attach - failed to power on unit: -71 [ 491.343282][ T9372] overlayfs: failed to resolve './bus': -2 [ 491.372124][ T5883] Bluetooth: hci7: command 0x0c1a tx timeout [ 491.514277][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 491.662199][ T5885] Bluetooth: hci6: command 0x0c1a tx timeout [ 491.669349][ T9] usb 3-1: USB disconnect, device number 8 [ 492.046624][ T9384] loop4: detected capacity change from 0 to 256 [ 492.144107][ T9385] loop6: detected capacity change from 0 to 128 [ 493.500494][ T5885] Bluetooth: hci7: command 0x0c1a tx timeout [ 494.990887][ T9385] EXT4-fs: error -4 creating inode table initialization thread [ 494.999062][ T9385] EXT4-fs (loop6): mount failed [ 495.038760][ T9384] FAT-fs (loop4): Directory bread(block 64) failed [ 495.045586][ T9384] FAT-fs (loop4): Directory bread(block 65) failed [ 495.052245][ T9384] FAT-fs (loop4): Directory bread(block 66) failed [ 495.059469][ T9384] FAT-fs (loop4): Directory bread(block 67) failed [ 495.066063][ T9384] FAT-fs (loop4): Directory bread(block 68) failed [ 495.072908][ T9384] FAT-fs (loop4): Directory bread(block 69) failed [ 495.079614][ T9384] FAT-fs (loop4): Directory bread(block 70) failed [ 495.086128][ T9384] FAT-fs (loop4): Directory bread(block 71) failed [ 495.092827][ T9384] FAT-fs (loop4): Directory bread(block 72) failed [ 495.099413][ T9384] FAT-fs (loop4): Directory bread(block 73) failed [ 495.376176][ T9389] futex_wake_op: syz.5.782 tries to shift op by 36; fix this program [ 495.487645][ T9393] loop6: detected capacity change from 0 to 256 [ 495.781140][ T9401] befs: (nbd7): No write support. Marking filesystem read-only [ 495.792296][ T9401] block nbd7: Attempted send on invalid socket [ 495.798523][ T9401] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.809473][ T9401] befs: (nbd7): unable to read superblock [ 495.912820][ T9403] fuse: Bad value for 'fd' [ 499.896514][ T9424] loop7: detected capacity change from 0 to 1024 [ 499.933536][ T9424] EXT4-fs: inline encryption not supported [ 499.959945][ T9424] EXT4-fs: Ignoring removed nobh option [ 499.965539][ T9424] EXT4-fs: Ignoring removed bh option [ 500.121988][ T6079] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 500.152392][ T9424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.221335][ T30] audit: type=1800 audit(500.206:16): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.791" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 500.272913][ T9424] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.791: Allocating blocks 385-513 which overlap fs metadata [ 500.319347][ T6079] usb 5-1: Using ep0 maxpacket: 32 [ 500.391358][ T9424] EXT4-fs (loop7): pa ffff888031d51cb0: logic 16, phys. 129, len 24 [ 500.399643][ T9424] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 500.436044][ T6079] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 500.487030][ T6079] usb 5-1: config 0 has no interface number 0 [ 500.516547][ T6079] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 500.538766][ T6079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.774199][ T6079] usb 5-1: Product: syz [ 500.778432][ T6079] usb 5-1: Manufacturer: syz [ 500.989018][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.999353][ T6079] usb 5-1: SerialNumber: syz [ 501.006602][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.040431][ T6079] usb 5-1: config 0 descriptor?? [ 501.050485][ T6079] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.080110][ T8751] Trying to write to read-only block-device loop7 [ 501.128629][ T8751] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.299919][ T6079] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 502.340276][ T6079] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 502.552267][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 502.559089][ T43] usb 5-1: USB disconnect, device number 13 [ 502.616926][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 502.811648][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 503.156044][ T43] quatech2 5-1:0.51: device disconnected [ 503.385102][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 503.455252][ T9460] futex_wake_op: syz.4.802 tries to shift op by 36; fix this program [ 503.586671][ T9467] befs: (nbd7): No write support. Marking filesystem read-only [ 503.595769][ T9467] block nbd7: Attempted send on invalid socket [ 503.602173][ T9467] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 503.613812][ T9467] befs: (nbd7): unable to read superblock [ 503.712477][ T9469] fuse: Bad value for 'fd' [ 504.526727][ T9471] loop2: detected capacity change from 0 to 256 [ 504.590335][ T9471] exfat: Deprecated parameter 'utf8' [ 504.595725][ T9471] exfat: Deprecated parameter 'namecase' [ 504.699332][ T9471] exfat: Bad value for 'namecase' [ 504.973713][ T9478] loop4: detected capacity change from 0 to 256 [ 505.588064][ T9478] FAT-fs (loop4): Directory bread(block 64) failed [ 505.594704][ T9478] FAT-fs (loop4): Directory bread(block 65) failed [ 505.602018][ T9478] FAT-fs (loop4): Directory bread(block 66) failed [ 505.608938][ T9478] FAT-fs (loop4): Directory bread(block 67) failed [ 505.615648][ T9478] FAT-fs (loop4): Directory bread(block 68) failed [ 505.622200][ T9478] FAT-fs (loop4): Directory bread(block 69) failed [ 505.628779][ T9478] FAT-fs (loop4): Directory bread(block 70) failed [ 505.635377][ T9478] FAT-fs (loop4): Directory bread(block 71) failed [ 505.642005][ T9478] FAT-fs (loop4): Directory bread(block 72) failed [ 505.648713][ T9478] FAT-fs (loop4): Directory bread(block 73) failed [ 506.181408][ T8705] udevd[8705]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 506.409008][ T8705] udevd[8705]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 508.588474][ T9522] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 508.646100][ T9522] overlayfs: failed to set xattr on upper [ 508.705726][ T9522] overlayfs: ...falling back to redirect_dir=nofollow. [ 508.764282][ T9522] overlayfs: ...falling back to index=off. [ 508.809325][ T9522] overlayfs: ...falling back to uuid=null. [ 509.879560][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 510.120229][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 510.216738][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 510.271690][ T24] usb 5-1: config 0 has no interface number 0 [ 510.325562][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 510.350456][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.362930][ T24] usb 5-1: Product: syz [ 510.367238][ T24] usb 5-1: Manufacturer: syz [ 510.399433][ T24] usb 5-1: SerialNumber: syz [ 510.425388][ T24] usb 5-1: config 0 descriptor?? [ 510.460628][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 510.670037][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 510.685687][ T9545] futex_wake_op: syz.1.820 tries to shift op by 36; fix this program [ 510.739776][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 511.073397][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 511.074117][ T6015] usb 5-1: USB disconnect, device number 14 [ 511.382458][ T6015] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 511.476036][ T6015] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 511.527469][ T6015] quatech2 5-1:0.51: device disconnected [ 512.619685][ T6079] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 512.980416][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.009925][ T6079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.050543][ T6079] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 513.093100][ T6079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.141384][ T6079] usb 5-1: config 0 descriptor?? [ 513.596856][ T6079] usbhid 5-1:0.0: can't add hid device: -71 [ 514.279336][ T6079] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 514.349742][ T6079] usb 5-1: USB disconnect, device number 15 [ 516.601556][ T9627] syz.6.836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 517.545757][ T6079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.660311][ T6079] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 520.856756][ T30] audit: type=1326 audit(520.836:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb06d8eba9 code=0x0 [ 525.668828][ T9686] loop4: detected capacity change from 0 to 16 [ 525.734625][ T9686] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 25144) [ 527.515217][ T6079] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.389297][ T6079] usb 6-1: Using ep0 maxpacket: 8 [ 528.401014][ T6079] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 528.422398][ T6079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 528.449645][ T6079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.485991][ T6079] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.522230][ T6079] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.549224][ T6079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.788694][ T6079] usb 6-1: GET_CAPABILITIES returned 0 [ 528.803160][ T6079] usbtmc 6-1:16.0: can't read capabilities [ 528.984137][ T9719] loop7: detected capacity change from 0 to 256 [ 529.000811][ T9719] exfat: Bad value for 'fmask' [ 529.997846][ T9722] loop7: detected capacity change from 0 to 16384 [ 530.959759][ T9722] loop7: detected capacity change from 16384 to 0 [ 531.119784][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.149523][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.165401][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.179374][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.285268][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 532.505775][ T6026] usb 6-1: USB disconnect, device number 10 [ 533.346198][ T9725] lo speed is unknown, defaulting to 1000 [ 533.410365][ T5883] Bluetooth: hci1: command tx timeout [ 535.493702][ T5883] Bluetooth: hci1: command tx timeout [ 536.279633][ T9215] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 536.499780][ T9215] usb 5-1: Using ep0 maxpacket: 8 [ 536.580116][ T9215] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 536.671627][ T9215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 536.721559][ T9215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.769242][ T9215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.969265][ T9215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.978342][ T9215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.790890][ T5883] Bluetooth: hci1: command tx timeout [ 538.638212][ T9215] usb 5-1: GET_CAPABILITIES returned 0 [ 538.672742][ T9215] usbtmc 5-1:16.0: can't read capabilities [ 538.972229][ T9808] loop7: detected capacity change from 0 to 16384 [ 539.046786][ T9808] loop7: detected capacity change from 16384 to 0 [ 539.195701][ T6150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.212267][ T6150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.225788][ T6150] bond0 (unregistering): Released all slaves [ 539.256595][ T9725] chnl_net:caif_netlink_parms(): no params data found [ 539.293243][ T9795] bridge0: entered promiscuous mode [ 539.298792][ T9795] macvlan2: entered promiscuous mode [ 539.424800][ T9813] tipc: Started in network mode [ 539.469546][ T9813] tipc: Node identity 5655b91911d1, cluster identity 4711 [ 539.497118][ T9813] tipc: Enabled bearer , priority 0 [ 539.582630][ T9814] syzkaller0: entered promiscuous mode [ 539.597744][ T9814] syzkaller0: entered allmulticast mode [ 539.661488][ T9810] tipc: Resetting bearer [ 539.708062][ T9809] tipc: Resetting bearer [ 539.723960][ T9809] tipc: Disabling bearer [ 539.819945][ T5883] Bluetooth: hci1: command tx timeout [ 539.924747][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.968181][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.010188][ T9725] bridge_slave_0: entered allmulticast mode [ 540.045658][ T9725] bridge_slave_0: entered promiscuous mode [ 540.078690][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.097801][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.124569][ T9725] bridge_slave_1: entered allmulticast mode [ 540.147354][ T9725] bridge_slave_1: entered promiscuous mode [ 540.171997][ T6026] usb 5-1: USB disconnect, device number 16 [ 540.785007][ T6150] hsr_slave_0: left promiscuous mode [ 540.849537][ T6150] hsr_slave_1: left promiscuous mode [ 540.855628][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.914845][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.992719][ T9852] loop7: detected capacity change from 0 to 512 [ 541.001020][ T9852] EXT4-fs: Ignoring removed oldalloc option [ 542.125950][ T6079] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 544.020052][ T6079] usb 5-1: Using ep0 maxpacket: 8 [ 544.111550][ T9876] loop5: detected capacity change from 0 to 256 [ 544.119134][ T9876] exfat: Deprecated parameter 'codepage' [ 544.128009][ T6079] usb 5-1: device descriptor read/all, error -71 [ 544.188868][ T9876] exfat: Bad value for 'codepage' [ 545.547776][ T9893] loop7: detected capacity change from 0 to 512 [ 546.167035][ T9895] loop7: detected capacity change from 0 to 40427 [ 551.077520][ T6150] team0 (unregistering): Port device team_slave_1 removed [ 551.214625][ T6150] team0 (unregistering): Port device team_slave_0 removed [ 551.499307][ T6026] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 551.635446][ T9725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.663395][ T9890] bridge0: entered promiscuous mode [ 551.668683][ T9890] macvlan2: entered promiscuous mode [ 551.682827][ T9725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.735228][ T6026] usb 6-1: unable to get BOS descriptor or descriptor too short [ 551.779977][ T6026] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 551.867823][ T6026] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 551.927646][ T6026] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 551.953675][ T6026] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.974425][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.995648][ T6026] usb 6-1: Product: syz [ 552.005396][ T9844] lo speed is unknown, defaulting to 1000 [ 552.007623][ T9725] team0: Port device team_slave_0 added [ 552.013407][ T6026] usb 6-1: Manufacturer: ń°„‰ [ 552.028822][ T6026] usb 6-1: SerialNumber: syz [ 552.147750][ T9725] team0: Port device team_slave_1 added [ 552.178625][ T9943] loop4: detected capacity change from 0 to 16 [ 552.203772][ T9943] erofs (device loop4): mounted with root inode @ nid 36. [ 552.295989][ T6026] cdc_ncm 6-1:1.0: bind() failure [ 552.369879][ T6026] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 552.420691][ T6026] cdc_ncm 6-1:1.1: bind() failure [ 552.507744][ T6026] usb 6-1: USB disconnect, device number 11 [ 552.757271][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.470175][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.521216][ T9725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.564778][ T9725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.572131][ T9725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.664833][ T9725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.713206][ T9725] hsr_slave_0: entered promiscuous mode [ 556.750086][ T9725] hsr_slave_1: entered promiscuous mode [ 556.775879][ T9725] debugfs: 'hsr0' already exists in 'hsr' [ 556.820101][ T9725] Cannot create hsr debugfs directory [ 556.937645][ T9986] loop7: detected capacity change from 0 to 4096 [ 557.999700][ T9969] loop5: detected capacity change from 0 to 512 [ 558.099306][ T9969] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 559.914035][ T9725] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 560.018023][ T9725] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 560.154433][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.251904][ T5885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.260136][ T5885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.274280][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.284981][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.433716][ T9725] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 560.538539][ T9725] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 560.778487][T10013] lo speed is unknown, defaulting to 1000 [ 561.058219][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.123845][ T9725] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.427068][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.434329][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.672246][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.679424][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.888581][ T6668] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.969111][T10013] chnl_net:caif_netlink_parms(): no params data found [ 562.116740][ T6668] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.231305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.237639][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.371379][ T5883] Bluetooth: hci3: command tx timeout [ 562.505046][ T6668] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.789285][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 562.928233][ T6668] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.989343][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 563.032253][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 563.059284][ T24] usb 3-1: config 0 has no interface number 0 [ 563.088147][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 563.118807][ T24] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 563.152264][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 563.189371][ T24] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 563.339265][ T24] usb 3-1: Product: syz [ 563.343482][ T24] usb 3-1: SerialNumber: syz [ 563.411668][ T24] usb 3-1: config 0 descriptor?? [ 563.474072][ T24] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 563.521183][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 563.611119][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.639973][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.676618][T10013] bridge_slave_0: entered allmulticast mode [ 563.701644][T10013] bridge_slave_0: entered promiscuous mode [ 563.715657][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.739663][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.747212][T10013] bridge_slave_1: entered allmulticast mode [ 563.757366][T10013] bridge_slave_1: entered promiscuous mode [ 564.214944][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 564.303966][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.385279][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.392731][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.430056][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.449305][ T5883] Bluetooth: hci3: command tx timeout [ 565.017932][T10013] team0: Port device team_slave_0 added [ 565.139473][T10013] team0: Port device team_slave_1 added [ 565.167432][ C1] cm109_urb_ctl_callback: 165 callbacks suppressed [ 565.167453][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.181481][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.188627][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.196033][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.203506][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.210839][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.218016][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.226159][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.236095][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.243000][ T6668] bridge_slave_1: left allmulticast mode [ 565.249470][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 565.264621][ T6668] bridge_slave_1: left promiscuous mode [ 565.268775][ T24] usb 3-1: USB disconnect, device number 9 [ 565.270289][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 565.313424][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.319350][ T5968] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 565.344000][ T6668] bridge_slave_0: left allmulticast mode [ 565.351246][ T24] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 565.367007][ T6668] bridge_slave_0: left promiscuous mode [ 565.378808][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.479304][ T5968] usb 5-1: Using ep0 maxpacket: 8 [ 565.512569][ T5968] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 565.537838][ T5968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 565.548207][ T5968] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 565.559495][ T5968] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.573807][ T5968] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.583064][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.173630][T10068] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 566.339851][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 566.541656][ T5885] Bluetooth: hci3: command tx timeout [ 566.549000][ T5968] usb 5-1: GET_CAPABILITIES returned 0 [ 566.556146][ T5968] usbtmc 5-1:16.0: can't read capabilities [ 567.038052][T10077] loop7: detected capacity change from 0 to 16384 [ 567.790987][T10058] loop7: detected capacity change from 16384 to 0 [ 568.066974][ T6668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.138425][ T6668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.163780][ T6668] bond0 (unregistering): Released all slaves [ 568.209410][ T5883] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 568.215729][ T5885] Bluetooth: hci4: command 0x1003 tx timeout [ 568.477412][T10088] befs: (nbd5): No write support. Marking filesystem read-only [ 568.486983][T10088] block nbd5: Attempted send on invalid socket [ 568.493336][T10088] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.525247][T10088] befs: (nbd5): unable to read superblock [ 568.603416][T10090] fuse: Bad value for 'fd' [ 568.609697][ T5883] Bluetooth: hci3: command tx timeout [ 570.242378][ T6026] usb 5-1: USB disconnect, device number 19 [ 570.633363][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.728110][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'. [ 571.434417][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.522857][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.843969][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.919384][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.946300][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.854751][ T9725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.161666][T10013] hsr_slave_0: entered promiscuous mode [ 573.174905][T10013] hsr_slave_1: entered promiscuous mode [ 573.210372][T10013] debugfs: 'hsr0' already exists in 'hsr' [ 573.235417][T10013] Cannot create hsr debugfs directory [ 574.356412][ T6668] hsr_slave_0: left promiscuous mode [ 574.409257][ T6668] hsr_slave_1: left promiscuous mode [ 574.451862][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.516166][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.580453][ T9215] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 574.599128][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.649755][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.773372][ T6668] veth1_macvtap: left promiscuous mode [ 574.789373][ T9215] usb 5-1: Using ep0 maxpacket: 8 [ 574.819822][ T6668] veth0_macvtap: left promiscuous mode [ 574.836775][ T9215] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 574.870973][ T6668] veth1_vlan: left promiscuous mode [ 574.876378][ T6668] veth0_vlan: left promiscuous mode [ 574.918285][ T9215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 574.973716][ T9215] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.050297][ T9215] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.104385][ T9215] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.159326][ T9215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.072273][T10155] loop7: detected capacity change from 0 to 16384 [ 576.119543][ T9215] usb 5-1: GET_CAPABILITIES returned 0 [ 576.125097][ T9215] usbtmc 5-1:16.0: can't read capabilities [ 576.381458][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 576.391567][T10155] loop7: detected capacity change from 16384 to 0 [ 577.791353][ T24] usb 5-1: USB disconnect, device number 20 [ 580.058028][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 580.466943][ T6668] team0 (unregistering): Port device team_slave_1 removed [ 580.478646][ T9] usb 3-1: device not accepting address 10, error -71 [ 580.499543][ T6026] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 580.521141][ T6668] team0 (unregistering): Port device team_slave_0 removed [ 580.693061][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 580.711812][ T6026] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 580.729310][ T6026] usb 5-1: config 0 has no interface number 0 [ 580.744557][ T6026] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 580.774311][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.800460][ T6026] usb 5-1: Product: syz [ 580.808819][ T6026] usb 5-1: Manufacturer: syz [ 580.820048][ T6026] usb 5-1: SerialNumber: syz [ 580.837347][ T6026] usb 5-1: config 0 descriptor?? [ 580.857344][ T6026] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 581.067383][ T6026] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 581.126220][ T6026] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 581.154324][T10186] loop7: detected capacity change from 0 to 40427 [ 581.351632][T10186] f2fs: Unknown parameter '18446744073709551615˙˙˙˙˙˙˙˙:K韟r~b(_ƒÜdĄ"°2‰2Ç+#‚(' [ 581.723895][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 581.732244][ T9] usb 5-1: USB disconnect, device number 21 [ 581.814057][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 581.910840][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 581.932075][ T9] quatech2 5-1:0.51: device disconnected [ 581.964486][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 583.209580][ T6026] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 583.463382][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 583.516651][ T6026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 583.605050][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 583.775066][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.013729][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.617450][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.631259][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.697156][ T9725] veth0_vlan: entered promiscuous mode [ 584.927547][ T6026] usb 5-1: GET_CAPABILITIES returned 0 [ 584.959369][ T6026] usbtmc 5-1:16.0: can't read capabilities [ 585.070721][ T9725] veth1_vlan: entered promiscuous mode [ 585.861980][T10229] loop7: detected capacity change from 0 to 16384 [ 586.002470][T10013] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 586.027010][T10013] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 586.984087][T10229] loop7: detected capacity change from 16384 to 0 [ 587.011663][T10241] befs: (nbd2): No write support. Marking filesystem read-only [ 587.023582][T10241] block nbd2: Attempted send on invalid socket [ 587.029887][T10241] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 587.040001][T10241] befs: (nbd2): unable to read superblock [ 587.141085][T10242] fuse: Bad value for 'fd' [ 587.265690][ C0] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.345814][T10013] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 587.521211][ T10] usb 5-1: USB disconnect, device number 22 [ 587.605730][T10013] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 587.873140][T10250] siw: device registration error -23 [ 588.849649][ T5968] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 589.049319][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 589.057429][ T5968] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 589.118763][ T5968] usb 5-1: config 0 has no interface number 0 [ 589.134604][ T5968] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 589.144150][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.191953][ T5968] usb 5-1: Product: syz [ 589.205100][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.214036][ T5968] usb 5-1: Manufacturer: syz [ 589.233056][ T5968] usb 5-1: SerialNumber: syz [ 589.284631][ T5968] usb 5-1: config 0 descriptor?? [ 589.309105][T10013] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.321886][ T5968] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 589.658198][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.665468][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.441328][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.448579][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.470351][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 590.487392][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 590.497083][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 590.506315][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 590.522266][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 591.283594][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 591.293462][ T5968] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 591.308035][ T5968] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 591.328213][ T5968] usb 5-1: USB disconnect, device number 23 [ 592.300997][ T5968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 592.319257][ T5968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 592.348717][ T5968] quatech2 5-1:0.51: device disconnected [ 592.630970][ T5883] Bluetooth: hci4: command tx timeout [ 593.192733][T10275] lo speed is unknown, defaulting to 1000 [ 594.689986][ T5883] Bluetooth: hci4: command tx timeout [ 595.218311][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 595.369812][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 595.442585][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 595.529745][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 595.625192][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.665811][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.718838][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.770927][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.006031][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 596.024843][ T43] usbtmc 3-1:16.0: can't read capabilities [ 596.168990][ T3540] Bluetooth: hci1: Frame reassembly failed (-84) [ 596.304944][ T6023] bridge_slave_1: left allmulticast mode [ 596.337672][ T6023] bridge_slave_1: left promiscuous mode [ 596.375842][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.541727][T10349] loop7: detected capacity change from 0 to 512 [ 596.772353][ T5885] Bluetooth: hci4: command tx timeout [ 597.068712][T10351] loop7: detected capacity change from 0 to 16384 [ 597.161617][ T6023] bridge_slave_0: left allmulticast mode [ 597.167499][ T6023] bridge_slave_0: left promiscuous mode [ 597.174848][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.431022][T10311] loop7: detected capacity change from 16384 to 0 [ 597.439063][ C1] I/O error, dev loop7, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.668118][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.686047][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.714202][ T6023] bond0 (unregistering): Released all slaves [ 597.771657][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.893551][ T6023] hsr_slave_0: left promiscuous mode [ 597.914092][ T6023] hsr_slave_1: left promiscuous mode [ 597.928933][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.964963][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.037333][ T6023] veth1_vlan: left promiscuous mode [ 598.074820][ T6023] veth0_vlan: left promiscuous mode [ 598.209413][ T5885] Bluetooth: hci1: command 0x1003 tx timeout [ 598.229386][ T5883] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 598.353443][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 598.570955][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 598.645882][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 598.677566][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 598.699884][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 598.857903][ T5883] Bluetooth: hci4: command tx timeout [ 599.392572][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.439982][ T9] usb 3-1: USB disconnect, device number 12 [ 599.487805][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.567567][ T10] usb 6-1: Product: syz [ 599.840445][T10370] process 'syz.5.1006' launched '/dev/fd/11' with NULL argv: empty string added [ 600.573224][ T10] usb 6-1: can't set config #1, error -71 [ 600.601898][ T10] usb 6-1: USB disconnect, device number 12 [ 601.679470][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 601.755383][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 602.992436][T10388] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 603.745948][T10363] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.753176][T10363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.760755][T10363] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.767891][T10363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.792246][T10363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.971543][ T5948] lo speed is unknown, defaulting to 1000 [ 603.978542][T10275] chnl_net:caif_netlink_parms(): no params data found [ 605.047677][T10411] block device autoloading is deprecated and will be removed. [ 605.063368][ T5948] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 605.518544][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 605.593060][ T5948] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 605.784879][ T5948] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 605.802843][ T5948] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 605.826784][ T5948] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.867362][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.906333][ T5948] usb 5-1: Product: syz [ 605.925843][ T5948] usb 5-1: Manufacturer: ń°„‰ [ 605.946356][T10275] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.954645][ T5948] usb 5-1: SerialNumber: syz [ 605.982922][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.001617][T10275] bridge_slave_0: entered allmulticast mode [ 606.020103][T10275] bridge_slave_0: entered promiscuous mode [ 606.067014][T10275] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.093499][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.125369][T10275] bridge_slave_1: entered allmulticast mode [ 606.171473][T10275] bridge_slave_1: entered promiscuous mode [ 606.211902][ T5948] cdc_ncm 5-1:1.0: bind() failure [ 606.254524][ T5948] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 606.311555][ T5948] cdc_ncm 5-1:1.1: bind() failure [ 606.345519][ T5948] usb 5-1: USB disconnect, device number 24 [ 606.505485][T10275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.583055][T10275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.738513][T10275] team0: Port device team_slave_0 added [ 606.807170][T10275] team0: Port device team_slave_1 added [ 607.037884][T10275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.056089][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.169525][T10275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.330752][T10447] loop4: detected capacity change from 0 to 1024 [ 607.337856][T10275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.350086][T10275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.389926][T10275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.418774][T10447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.432983][T10013] veth0_vlan: entered promiscuous mode [ 607.602978][T10447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 607.624560][T10447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 607.648281][T10013] veth1_vlan: entered promiscuous mode [ 607.656764][T10447] EXT4-fs (loop4): This should not happen!! Data will be lost [ 607.656764][T10447] [ 607.710469][T10447] EXT4-fs (loop4): Total free blocks count 0 [ 607.766713][T10447] EXT4-fs (loop4): Free/Dirty block details [ 607.780640][T10275] hsr_slave_0: entered promiscuous mode [ 607.789404][T10275] hsr_slave_1: entered promiscuous mode [ 607.795148][T10447] EXT4-fs (loop4): free_blocks=4293918720 [ 607.811085][T10275] debugfs: 'hsr0' already exists in 'hsr' [ 607.821196][T10447] EXT4-fs (loop4): dirty_blocks=16 [ 607.826498][T10447] EXT4-fs (loop4): Block reservation details [ 607.830769][T10275] Cannot create hsr debugfs directory [ 607.855257][T10447] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 607.958039][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.142327][T10013] veth0_macvtap: entered promiscuous mode [ 608.193227][T10013] veth1_macvtap: entered promiscuous mode [ 608.274131][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.170990][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.358590][ T6668] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.400124][ T6668] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.409550][ T6023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.418321][ T6023] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.439889][T10475] bridge0: port 3(vlan2) entered blocking state [ 610.473514][T10475] bridge0: port 3(vlan2) entered disabled state [ 610.531266][T10469] syz.7.1026 (10469): drop_caches: 2 [ 610.559711][T10475] vlan2: entered allmulticast mode [ 610.569741][T10475] bridge0: entered allmulticast mode [ 610.702853][T10482] loop5: detected capacity change from 0 to 1024 [ 611.553997][T10482] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 612.685936][T10482] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.1029: lblock 1 mapped to illegal pblock 1 (length 1) [ 612.720120][T10482] Quota error (device loop5): write_blk: dquota write failed [ 612.728042][T10482] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 612.738906][T10482] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1029: Failed to acquire dquot type 0 [ 612.779804][T10482] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.1029: Freeing blocks not in datazone - block = 0, count = 4096 [ 612.796547][T10482] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1029: Invalid inode bitmap blk 0 in block_group 0 [ 612.810777][T10482] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 612.828914][T10482] EXT4-fs (loop5): 1 orphan inode deleted [ 612.851117][T10482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.897211][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1029'. [ 612.908467][T10475] vlan2: left allmulticast mode [ 613.020033][ T6141] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 613.241412][T10475] bridge0: left allmulticast mode [ 613.471665][ T6141] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 613.480581][ T6141] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0 [ 613.625258][T10489] loop7: detected capacity change from 0 to 256 [ 614.646802][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.677960][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.697659][ T6257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.707991][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.779765][ T6257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.900913][T10486] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1030' sets config #1 [ 615.018023][ T30] audit: type=1326 audit(614.996:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8a878eba9 code=0x0 [ 615.218012][T10275] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 615.374049][T10275] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 615.469348][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 615.581155][T10275] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 615.630909][T10275] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 615.689354][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 615.716256][ T43] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 615.769471][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 615.793156][ T43] usb 6-1: config 0 has no interface number 0 [ 615.846314][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 615.877932][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.939324][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 615.956855][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 616.020196][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 616.075557][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.115805][ T43] usb 6-1: Product: syz [ 616.136438][ T43] usb 6-1: Manufacturer: syz [ 616.144481][ T43] usb 6-1: SerialNumber: syz [ 616.144481][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.144532][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.197694][ T43] usb 6-1: config 0 descriptor?? [ 616.836587][ T43] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.914696][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.970635][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 617.115746][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 617.146193][ T5873] usb 5-1: GET_CAPABILITIES returned 0 [ 617.167728][ T5873] usbtmc 5-1:16.0: can't read capabilities [ 617.197465][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.345234][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.366185][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 617.392378][ T43] usb 6-1: USB disconnect, device number 13 [ 617.469986][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 617.489078][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.496282][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.540915][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.548066][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.612454][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 617.615006][T10512] loop7: detected capacity change from 0 to 16384 [ 617.652839][ T43] quatech2 6-1:0.51: device disconnected [ 617.790514][T10512] loop7: detected capacity change from 16384 to 0 [ 617.808297][ C0] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 619.575319][ T6026] usb 5-1: USB disconnect, device number 25 [ 619.901770][T10567] loop4: detected capacity change from 0 to 256 [ 620.399560][T10275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.829489][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 621.848351][T10587] pim6reg1: entered promiscuous mode [ 621.910170][T10587] pim6reg1: entered allmulticast mode [ 622.079267][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 622.100619][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 622.151019][ T10] usb 6-1: config 0 has no interface number 0 [ 622.157209][ T10] usb 6-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.350909][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 622.415992][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 622.425768][ T10] usb 6-1: Product: syz [ 622.433637][ T10] usb 6-1: SerialNumber: syz [ 622.470157][ T10] usb 6-1: config 0 descriptor?? [ 622.520225][ T10] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 623.361916][T10275] veth0_vlan: entered promiscuous mode [ 623.390743][T10275] veth1_vlan: entered promiscuous mode [ 623.472446][T10275] veth0_macvtap: entered promiscuous mode [ 623.515061][T10275] veth1_macvtap: entered promiscuous mode [ 623.675467][T10614] loop4: detected capacity change from 0 to 1024 [ 623.684073][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.691517][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.511189][T10614] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 626.521888][T10614] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 626.522869][T10614] EXT4-fs: failed to create workqueue [ 626.538136][T10614] EXT4-fs (loop4): mount failed [ 626.588793][T10275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.701548][ T24] usb 6-1: USB disconnect, device number 14 [ 626.791389][T10275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.057751][ T6023] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.399466][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 627.627183][ T6023] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.792131][ T6023] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.319399][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 628.329406][ T6023] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.554586][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 629.098631][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 629.161779][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.241711][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.334947][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.375652][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.551244][ T6668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.655060][ T6668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.736337][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.762320][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.872051][ T24] usb 6-1: usb_control_msg returned -71 [ 629.909026][ T24] usbtmc 6-1:16.0: can't read capabilities [ 629.969982][ T24] usb 6-1: USB disconnect, device number 15 [ 632.209732][ T6015] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 632.799210][ T6015] usb 9-1: Using ep0 maxpacket: 16 [ 632.850372][ T6015] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 632.951623][ T6015] usb 9-1: config 0 has no interface number 0 [ 632.957780][ T6015] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.022483][ T6015] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 633.031980][ T6015] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 633.040578][ T6015] usb 9-1: Product: syz [ 633.044932][ T6015] usb 9-1: SerialNumber: syz [ 633.073172][ T6015] usb 9-1: config 0 descriptor?? [ 633.104709][ T6015] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 634.441800][ T10] usb 9-1: USB disconnect, device number 2 [ 635.601645][T10707] syz.2.1068 (10707): drop_caches: 2 [ 636.746825][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 636.939479][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 636.961269][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 636.993330][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 637.018790][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 637.048303][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.076583][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.092728][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.324015][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 637.336053][ T9] usbtmc 10-1:16.0: can't read capabilities [ 637.409239][ T43] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 637.573075][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 637.593300][ T43] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 637.614757][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.642702][ T43] usb 6-1: config 0 descriptor?? [ 637.654168][T10750] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 637.721745][T10762] loop7: detected capacity change from 0 to 16384 [ 638.161819][T10762] loop7: detected capacity change from 16384 to 0 [ 638.426245][ T43] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 638.761347][ T43] usb 6-1: USB disconnect, device number 16 [ 639.665960][T10775] fido_id[10775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 639.917396][ T6015] usb 10-1: USB disconnect, device number 2 [ 640.212780][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 641.138640][ T6015] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 641.249297][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 641.271681][ T9] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 641.338339][ T9] usb 9-1: config 0 has no interface number 0 [ 641.366488][ T5873] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 641.522426][ T6015] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.650411][ T9] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.699171][ T6015] usb 10-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 641.909262][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 641.994480][ T5873] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 642.003408][ T6015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.038119][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.068343][ T6015] usb 10-1: config 0 descriptor?? [ 642.126775][ T5873] usb 3-1: config 0 has no interface number 0 [ 642.187055][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 642.219357][ T9] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 642.228484][ T9] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 642.297037][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.342842][ T9] usb 9-1: config 0 descriptor?? [ 642.362808][ T5873] usb 3-1: Product: syz [ 642.390378][ T9] usb 9-1: can't set config #0, error -71 [ 642.396240][ T5873] usb 3-1: Manufacturer: syz [ 642.446898][ T5873] usb 3-1: SerialNumber: syz [ 642.462363][ T9] usb 9-1: USB disconnect, device number 3 [ 642.478428][T10801] syz.4.1088 (10801): drop_caches: 2 [ 642.552988][ T5873] usb 3-1: config 0 descriptor?? [ 642.564310][ T6015] itetech 0003:258A:6A88.0008: item fetching failed at offset 5/7 [ 643.405177][ T5873] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 643.417453][ T6015] itetech 0003:258A:6A88.0008: probe with driver itetech failed with error -22 [ 643.418055][T10813] bridge0: entered promiscuous mode [ 643.432479][T10813] macvlan2: entered promiscuous mode [ 643.439604][ T5873] usb 3-1: No valid video chain found. [ 643.700229][ T6015] usb 10-1: USB disconnect, device number 3 [ 643.841674][ T9215] usb 3-1: USB disconnect, device number 13 [ 645.280533][T10833] binder_alloc: 10827: binder_alloc_buf, no vma [ 645.901351][T10837] loop4: detected capacity change from 0 to 1024 [ 646.522853][ T6015] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 646.540262][T10837] EXT4-fs: Ignoring removed orlov option [ 647.082862][T10850] loop7: detected capacity change from 0 to 256 [ 647.109958][T10837] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 647.149613][ T6015] usb 10-1: Using ep0 maxpacket: 8 [ 647.208780][ T6015] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 647.242711][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 647.256066][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.271504][ T6015] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.344007][T10837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.410279][ T6015] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.444622][ T6015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.710331][ T6015] usb 10-1: GET_CAPABILITIES returned 0 [ 647.740625][ T6015] usbtmc 10-1:16.0: can't read capabilities [ 647.939316][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 648.120042][T10834] loop7: detected capacity change from 0 to 16384 [ 648.174776][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 648.509421][ T43] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 648.514993][T10863] loop7: detected capacity change from 16384 to 0 [ 648.540050][ C0] I/O error, dev loop7, sector 15792 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 649.410268][ T43] usb 3-1: config 0 has no interface number 0 [ 649.430046][ T43] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.736322][ T5873] usb 10-1: USB disconnect, device number 4 [ 649.822431][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 649.849358][ T43] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 650.509794][T10879] bridge0: entered promiscuous mode [ 650.515109][T10879] macvlan2: entered promiscuous mode [ 650.647629][ T43] usb 3-1: Product: syz [ 650.663790][ T43] usb 3-1: SerialNumber: syz [ 650.686324][ T43] usb 3-1: config 0 descriptor?? [ 650.856609][ T43] usb 3-1: can't set config #0, error -71 [ 650.931599][ T43] usb 3-1: USB disconnect, device number 14 [ 652.203781][ T5863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.403665][T10895] loop5: detected capacity change from 0 to 16 [ 652.681144][T10895] erofs (device loop5): mounted with root inode @ nid 36. [ 653.033143][T10900] loop7: detected capacity change from 0 to 512 [ 655.578598][T10944] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1123'. [ 655.587980][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1123'. [ 657.459345][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 657.892930][T10956] random: crng reseeded on system resumption [ 659.956926][T10972] lo speed is unknown, defaulting to 1000 [ 660.051508][T10976] loop7: detected capacity change from 0 to 1024 [ 660.058857][T10976] EXT4-fs: Ignoring removed orlov option [ 660.064652][T10976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 660.071290][T10976] ext4: Unknown parameter 'audit' [ 660.583128][T10986] loop8: detected capacity change from 0 to 8192 [ 660.795325][T10979] lo speed is unknown, defaulting to 1000 [ 661.900471][T11003] loop9: detected capacity change from 0 to 16 [ 662.244455][T11003] erofs (device loop9): mounted with root inode @ nid 36. [ 662.273584][T11003] erofs (device loop9): read error -117 @ 8200 of nid 36 [ 662.772074][T11003] erofs (device loop9): read error -117 @ 8200 of nid 36 [ 665.184192][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 665.397365][T11025] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1145'. [ 665.556714][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 665.569244][ T5873] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 665.595307][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 665.680376][ T9] usb 6-1: config 0 has no interface number 0 [ 665.686531][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 665.739754][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 665.764754][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 665.789424][ T5873] usb 10-1: Using ep0 maxpacket: 8 [ 665.835872][ T9] usb 6-1: Product: syz [ 665.840964][ T5873] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 665.860148][ T9] usb 6-1: SerialNumber: syz [ 665.866023][ T5873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 665.884056][ T9] usb 6-1: config 0 descriptor?? [ 665.905172][ T9] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 665.914334][ T5873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.954253][ T5873] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.999742][ T5873] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 666.970387][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.481859][ T5873] usb 10-1: GET_CAPABILITIES returned 0 [ 667.487487][ T5873] usbtmc 10-1:16.0: can't read capabilities [ 668.000064][ T43] usb 6-1: USB disconnect, device number 17 [ 668.140874][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1150'. [ 668.200024][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1150'. [ 670.622808][ T6079] usb 10-1: USB disconnect, device number 6 [ 672.060738][T11090] netlink: 300 bytes leftover after parsing attributes in process `syz.8.1159'. [ 676.029231][ T5968] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 676.269229][ T5968] usb 10-1: Using ep0 maxpacket: 8 [ 676.329710][ T5968] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 676.491586][ T5968] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 676.765004][ T5968] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.049217][ T5968] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.063053][ T5968] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.093650][ T5968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.363193][ T5968] usb 10-1: GET_CAPABILITIES returned 0 [ 677.368801][ T5968] usbtmc 10-1:16.0: can't read capabilities [ 677.495045][T11143] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1172'. [ 677.504375][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1172'. [ 679.399743][T11149] loop7: detected capacity change from 0 to 16384 [ 679.550527][T11151] loop7: detected capacity change from 16384 to 0 [ 679.709296][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 681.148260][T11168] macvlan3: entered promiscuous mode [ 681.638685][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.645638][ T5948] usb 10-1: USB disconnect, device number 7 [ 681.650144][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 681.679823][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.708831][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.786190][ T9] usb 6-1: Product: syz [ 681.813368][ T9] usb 6-1: Manufacturer: syz [ 681.846197][ T9] usb 6-1: SerialNumber: syz [ 681.946662][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 682.011488][T11186] loop7: detected capacity change from 0 to 512 [ 682.019658][T11186] EXT4-fs: Ignoring removed i_version option [ 682.025741][T11186] EXT4-fs: Ignoring removed nobh option [ 682.152289][T11152] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 682.773763][T11152] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 683.099980][ T9] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 683.347823][ T9] wwan wwan0: port wwan0mbim0 attached [ 683.473774][ T9] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 92:0f:cc:98:6d:94 [ 684.383946][ T9] usb 6-1: USB disconnect, device number 18 [ 684.397179][ T9] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 685.096077][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.111341][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.367952][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 686.850409][T11244] netlink: 308 bytes leftover after parsing attributes in process `syz.9.1188'. [ 686.859697][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1188'. [ 687.201383][ T5885] Bluetooth: hci3: command 0x0406 tx timeout [ 690.479398][ T5948] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 690.679391][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 690.704557][ T5948] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 690.729049][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 690.813931][ T5948] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.831390][T11281] loop7: detected capacity change from 0 to 1024 [ 690.886758][ T5948] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.037461][ T5948] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.136245][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.485411][ T5948] usb 3-1: GET_CAPABILITIES returned 0 [ 691.697592][ T5948] usbtmc 3-1:16.0: can't read capabilities [ 692.713389][T11298] loop7: detected capacity change from 0 to 16384 [ 693.710879][T11303] syz.7.1203 (11303) used greatest stack depth: 17864 bytes left [ 694.009366][T11298] loop7: detected capacity change from 16384 to 0 [ 694.959677][ T9] usb 3-1: USB disconnect, device number 15 [ 695.833262][T11324] loop5: detected capacity change from 0 to 256 [ 697.091575][T11337] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 697.414084][ T3540] Bluetooth: hci1: Frame reassembly failed (-84) [ 697.973759][T11347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 699.176305][ T5885] Bluetooth: hci1: command 0x1003 tx timeout [ 699.183817][ T5883] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 699.944207][T11362] loop5: detected capacity change from 0 to 256 [ 702.652506][T11362] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 703.589177][T11375] loop9: detected capacity change from 0 to 256 [ 704.653439][T11380] loop9: detected capacity change from 0 to 256 [ 704.687690][T11380] exfat: Deprecated parameter 'utf8' [ 704.721508][T11380] exfat: Deprecated parameter 'namecase' [ 704.783724][T11380] exfat: Bad value for 'namecase' [ 705.087414][T11386] befs: (nbd5): No write support. Marking filesystem read-only [ 705.096595][T11386] block nbd5: Attempted send on invalid socket [ 705.103012][T11386] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.112900][T11386] befs: (nbd5): unable to read superblock [ 705.207289][T11386] fuse: Bad value for 'fd' [ 709.444456][T11413] [ 709.447037][T11413] ============================= [ 709.451976][T11413] WARNING: suspicious RCU usage [ 709.456906][T11413] syzkaller #0 Not tainted [ 709.461476][T11413] ----------------------------- [ 709.466346][T11413] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 709.475004][T11413] [ 709.475004][T11413] other info that might help us debug this: [ 709.475004][T11413] [ 709.485978][T11413] [ 709.485978][T11413] rcu_scheduler_active = 2, debug_locks = 1 [ 709.495049][T11413] 1 lock held by syz.8.1237/11413: [ 709.500894][T11413] #0: ffffffff8e13a2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 709.511438][T11413] [ 709.511438][T11413] stack backtrace: [ 709.517388][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.8.1237 Not tainted syzkaller #0 PREEMPT(full) [ 709.517419][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 709.517435][T11413] Call Trace: [ 709.517444][T11413] [ 709.517455][T11413] dump_stack_lvl+0x189/0x250 [ 709.517494][T11413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.517523][T11413] ? __pfx__printk+0x10/0x10 [ 709.517563][T11413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.517603][T11413] lockdep_rcu_suspicious+0x140/0x1d0 [ 709.517633][T11413] get_callchain_entry+0x2b6/0x3c0 [ 709.517677][T11413] get_perf_callchain+0xa1/0x6b0 [ 709.517724][T11413] ? __pfx_get_perf_callchain+0x10/0x10 [ 709.517762][T11413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.517797][T11413] ? preempt_schedule+0xae/0xc0 [ 709.517825][T11413] __bpf_get_stack+0x3fc/0xa60 [ 709.517877][T11413] ? __pfx___bpf_get_stack+0x10/0x10 [ 709.517917][T11413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.517944][T11413] ? __lock_acquire+0xab9/0xd20 [ 709.517990][T11413] bpf_get_stack+0x33/0x50 [ 709.518026][T11413] ? bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 709.518050][T11413] bpf_get_stack_raw_tp+0x1a9/0x220 [ 709.518088][T11413] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 709.518111][T11413] bpf_prog_run_pin_on_cpu+0xbf/0x150 [ 709.518145][T11413] bpf_prog_test_run_syscall+0x312/0x4b0 [ 709.518177][T11413] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 709.518204][T11413] ? __fget_files+0x2a/0x420 [ 709.518233][T11413] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 709.518263][T11413] bpf_prog_test_run+0x2c7/0x340 [ 709.518304][T11413] __sys_bpf+0x581/0x870 [ 709.518339][T11413] ? __pfx___sys_bpf+0x10/0x10 [ 709.518403][T11413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.518431][T11413] ? rcu_is_watching+0x15/0xb0 [ 709.518465][T11413] __x64_sys_bpf+0x7c/0x90 [ 709.518496][T11413] do_syscall_64+0xfa/0x3b0 [ 709.518523][T11413] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.518548][T11413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.518572][T11413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 709.518601][T11413] ? exc_page_fault+0x9f/0xf0 [ 709.518627][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.518651][T11413] RIP: 0033:0x7fda4ef8eba9 [ 709.518671][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.518692][T11413] RSP: 002b:00007fda4fdda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.518717][T11413] RAX: ffffffffffffffda RBX: 00007fda4f1d5fa0 RCX: 00007fda4ef8eba9 [ 709.518735][T11413] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 709.518751][T11413] RBP: 00007fda4f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 709.518766][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.518781][T11413] R13: 00007fda4f1d6038 R14: 00007fda4f1d5fa0 R15: 00007fffeed78448 [ 709.518819][T11413] [ 709.939299][T10322] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 710.089195][T10322] usb 6-1: Using ep0 maxpacket: 16 [ 710.141832][T10322] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 710.176242][T10322] usb 6-1: config 0 has no interface number 0 [ 710.206576][T10322] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 710.237909][T10322] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 710.269878][T10322] usb 6-1: config 0 interface 41 has no altsetting 0 [ 710.280919][T10322] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 710.291120][T10322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.306167][T10322] usb 6-1: Product: syz [ 710.311427][T10322] usb 6-1: Manufacturer: syz [ 710.316116][T10322] usb 6-1: SerialNumber: syz [ 710.331029][T10322] usb 6-1: config 0 descriptor?? [ 710.338954][T11416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 710.352728][T11416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 710.578131][T11416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 710.587710][T11416] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 711.212351][T10322] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 712.471058][T10322] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 712.482989][T10322] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 712.494902][T10322] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 712.507146][T10322] usb 6-1: USB disconnect, device number 19 [ 712.769446][ T5885] Bluetooth: hci4: command 0x0406 tx timeout